Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-13349 EUVD-2020-5609GHSA-7hm8-3c6v-r562

An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted i…

Published Nov 17, 2020 · Updated Aug 4, 2024 · Assigned by GitLab

Description

An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are >=8.12, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.

Affected products

VendorProductAffectedFixed
GitLab GitLab EE >=8.12, <13.3.9, >=13.4, <13.4.5, >=13.5, <13.5.2 —

References